New TRP option to save PCAPs on server

With TRP you can run little Ruby scripts to automate the response process. Currently, the FILTERED_DATAGRAMS method lets you download the PCAPs to the machine running the scripts. This does not work very well when you have to download Gigabytes of packet capture. We added a new option called “PcapDisposition”/docs/ref/trpproto.html which lets you save large packet captures on the server and not download it to the machine running the TRP script.

Fix database

If your data slices ever get corrupted, mostly due to a bad hardware clock, you now have two tools to fix it. Go to Admin → Start/Stop Tasks → Database status – Then scroll down and locate the two new tools

Delete slices older than XX – use this to manually remove very old data